350 matches found
Rebase aide to 0.13.1
Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...
Moderate: aide security update
0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...
CVE-2007-3460: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 aide or 2 perso parameter...
CVE-2006-5612: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in aide.php3 aka aide.php in GestArt beta 1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter...
CVE-2006-2689
Multiple cross-site scripting XSS vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 debutimage parameter in a article-album.php3, 2 date parameter in b rubrique.php3, and the 3 perso and 4 aide parameters to c an unknown script,...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 debutimage parameter in a article-album.php3, 2 date parameter in b rubrique.php3, and the 3 perso and 4 aide parameters to c an unknown script,...
Ubuntu 4.10 / 5.04 / 5.10 : aide vulnerabilities (USN-151-3)
USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues. The updated packagages...
CVE-2002-2199
CVE-2002-2199 concerns the Advanced Intrusion Detection Environment (AIDE). The default aide.conf on FreeBSD prior to 2002-08-28 with AIDE versions before 0.7_1 does not properly check subdirectories, enabling local users to bypass detection. Affected software/components: AIDE on FreeBSD; vulnera...
CVE-2002-2199
The default aide.conf file in Advanced Intrusion Detection Environment AIDE before 0.71 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection...
CVE-2002-2199
The default aide.conf file in Advanced Intrusion Detection Environment AIDE before 0.71 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection...